This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e3132352e3132382e302f31372d3332203d3e203538353933.roa File: 34302e3132352e3132382e302f31372d3332203d3e203538353933.roa (raw, json) Hash identifier: xvYQ7lwBaxHOGikSMgtXf4dBxT9LF60nwDMT1WLA8D8= Subject key identifier: BC:F5:FA:14:81:CF:E6:75:A9:B7:29:66:45:CD:12:DA:A7:53:CE:43 Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 1E55215B201C30904FE69C5CEC9DE411DCAB4677 Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e3132352e3132382e302f31372d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:24 +0000 ROA not before: Tue 20 Jan 2026 02:03:24 +0000 ROA not after: Tue 19 Jan 2027 02:08:24 +0000 asID: 58593 IP address blocks: 40.125.128.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:55:21:5b:20:1c:30:90:4f:e6:9c:5c:ec:9d:e4:11:dc:ab:46:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:24 2026 GMT Not After : Jan 19 02:08:24 2027 GMT Subject: CN=BCF5FA1481CFE675A9B7296645CD12DAA753CE43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:43:f8:fc:f4:d3:63:e4:96:95:11:ae:3b: 8f:16:aa:c6:bf:61:d0:f1:fb:b4:54:6c:4b:62:33: a1:26:fc:0b:40:c6:f2:af:a8:62:a7:25:75:b1:a2: d6:0b:7e:8e:e4:f7:f9:05:41:0b:31:a4:ed:91:c4: cc:a4:94:1f:54:4c:83:9f:49:1b:c5:e2:c6:5c:20: 8d:81:5f:ab:10:f6:a5:9f:17:4d:6b:38:94:00:e5: c9:88:9d:db:00:3a:8f:56:7d:f1:b9:29:a2:94:22: 14:70:35:4d:80:6b:50:e9:b1:74:7a:f9:19:a1:00: bf:5b:40:53:98:48:dd:40:92:61:ae:ad:3d:bf:8f: 92:5e:1a:8d:0c:c2:82:9b:d6:45:dd:70:7b:bd:34: 82:2c:25:77:62:60:df:7e:2f:99:b5:f3:1b:c0:7d: 12:26:d3:64:a2:8a:e2:ca:65:d8:63:e0:6f:cc:13: 40:5f:49:2f:9a:ee:11:fd:9a:aa:de:c3:bd:c8:75: 08:79:4b:ef:08:ac:cd:3c:00:3f:9c:d0:6f:17:89: bb:24:9d:38:53:3e:36:08:d0:1e:5f:da:5d:85:72: 5c:bb:79:a8:e8:e4:ff:4c:08:ae:00:11:56:ec:28: 21:2c:69:d8:e4:5b:5c:a0:f7:d7:21:a6:c2:fa:08: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F5:FA:14:81:CF:E6:75:A9:B7:29:66:45:CD:12:DA:A7:53:CE:43 X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/34302e3132352e3132382e302f31372d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.125.128.0/17 Signature Algorithm: sha256WithRSAEncryption 55:d9:56:6c:99:45:8b:b2:50:9a:11:e7:b0:b3:2a:bb:54:6f: 29:e4:b8:89:42:9b:5a:8c:1b:87:26:47:b8:60:e2:69:9f:83: e7:55:cb:95:d4:49:10:50:7c:25:08:43:8c:2e:bd:54:1d:be: 63:11:d4:f4:37:f4:da:42:63:23:c1:30:4c:7a:6a:46:d9:2a: f4:63:e5:1c:35:6e:44:e6:32:78:3e:dd:40:3d:7a:a9:48:3a: 54:46:24:2d:b2:44:89:15:df:b2:1c:1d:ea:12:5d:11:8d:74: 23:63:90:d9:50:98:59:8b:a8:61:32:65:62:d4:10:a6:c1:11: f7:00:a3:60:a6:14:8f:15:1e:62:31:f9:5b:67:3c:c4:e2:b7: f3:22:14:d7:e2:45:a9:b2:80:02:05:4d:17:bf:49:bc:5a:03: 92:fa:60:27:ce:c1:a4:d2:7d:8a:e5:95:b2:c1:7e:7d:0d:ca: 21:92:dd:8e:7b:c3:f8:56:64:39:b8:d6:6c:f1:09:3a:16:0f: 24:9f:ce:e3:06:02:ca:39:10:07:25:84:51:a1:42:dd:dd:ca: f0:dd:b0:30:c0:84:e3:82:ec:49:de:73:f0:b6:7c:62:07:ea: f2:23:d2:33:25:9b:75:e6:90:ac:cf:46:10:07:4a:0b:53:6d: d2:9e:4a:50 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHlUhWyAcMJBP5pxc7J3kEdyrRncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjRaFw0yNzAxMTkwMjA4MjRaMDMxMTAvBgNV BAMTKEJDRjVGQTE0ODFDRkU2NzVBOUI3Mjk2NjQ1Q0QxMkRBQTc1M0NFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkUP4/PTTY+SWlRGuO48Wqsa/ YdDx+7RUbEtiM6Em/AtAxvKvqGKnJXWxotYLfo7k9/kFQQsxpO2RxMyklB9UTIOf SRvF4sZcII2BX6sQ9qWfF01rOJQA5cmIndsAOo9WffG5KaKUIhRwNU2Aa1DpsXR6 +RmhAL9bQFOYSN1AkmGurT2/j5JeGo0MwoKb1kXdcHu9NIIsJXdiYN9+L5m18xvA fRIm02SiiuLKZdhj4G/ME0BfSS+a7hH9mqrew73IdQh5S+8IrM08AD+c0G8Xibsk nThTPjYI0B5f2l2Fcly7eajo5P9MCK4AEVbsKCEsadjkW1yg99chpsL6CDovAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvPX6FIHP5nWptylmRc0S2qdTzkMwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MzIyMTk3MTg3Nzg5MS8xLzM0MzAyZTMxMzIz NTJlMzEzMjM4MmUzMDJmMzEzNzJkMzMzMjIwM2QzZTIwMzUzODM1MzkzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEByh9gDANBgkqhkiG9w0BAQsFAAOCAQEAVdlWbJlFi7JQmhHnsLMqu1Rv KeS4iUKbWowbhyZHuGDiaZ+D51XLldRJEFB8JQhDjC69VB2+YxHU9Df02kJjI8Ew THpqRtkq9GPlHDVuROYyeD7dQD16qUg6VEYkLbJEiRXfshwd6hJdEY10I2OQ2VCY WYuoYTJlYtQQpsER9wCjYKYUjxUeYjH5W2c8xOK38yIU1+JFqbKAAgVNF79JvFoD kvpgJ87BpNJ9iuWVssF+fQ3KIZLdjnvD+FZkObjWbPEJOhYPJJ/O4wYCyjkQByWE UaFC3d3K8N2wMMCE44LsSd5z8LZ8Ygfq8iPSMyWbdeaQrM9GEAdKC1Nt0p5KUA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:39 2026 by rpki-client